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Amendments to the Claims: 

This listing of claims will replace ail prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

Claims 1-8. (Canceled). 

9. (Currently Amended) A method of recovering an operation state of a 
processor from a buffer overflow attack, the method comprising: 

(a) detecting whether a buffer overflow attack is made on any write operation while 
storing write operations that are potential targets of buffer overflow attacks in a 
predetermined location instead of an original destination to store write operations; 

(b) storing the contents stored in the predetermined location at a predetermined 
interval in the original destination for storing write operations if no buffer overflow attack is 
detected and discarding unsafe write operations subsequent to a buffer overflow attack if 
a buffer overflow attack is detected; and 

(c) ignoring the unsafe write operations subsequent to the buffer overflow attack if 
a buffer overflow attack is detected,, 

wherein if the original destination storing the write operations is accessed for a 
read operation, the original destination and the predetermined location storing the write 
operations are simultaneously accessed, and if an address for the read operation is 
included in the predetermined location storing the write operations, which are not vet 
stored in the original destination, data for the read operation is provided from the 
predetermined location storing the write operations . 

10. (Original) The method of claim 9, wherein, in (b), if a buffer overflow attack 
is detected, write operations stored before the buffer overflow attack is made are stored in 
the original destination for storing the write operations. 
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1 1 . (Original) The method of claim 9, wherein, in (a), if there are second sets of 
consecutive write operations in contiguous regions of the original destination for storing 
write operations, the write operations are stored in the predetermined location, and 
otherwise the write operations are written to the original destination. 

12. (Canceled) 

13. (Currently Amended) An apparatus for recovering an operation state of a 
processor from a buffer overflow attack, the apparatus comprising: 

a storing unit storing write operations that are potential targets of buffer overflow 
attacks in a predetermined storage unit, which is not a memory unit originally designated 
to store write operations; 

an attack detecting unit detecting whether or not a buffer overflow attack is made 
on any of the write operations; 

a storage management unit storing the contents stored in the predetermined 
storage unit in a memory unit which is originally designated to store write operations at a 
predetermined interval if no buffer overflow attack is detected and discarding unsafe write 
operations subsequent to a buffer overflow attack if a buffer overflow attack is detected; 

a write management unit ignoring the unsafe write operations subsequent to the 
buffer overflow attack and not storing the unsafe write operations in the predetermined 
storage unit if a buffer overflow attack is detected ; and 

a fetch management unit managing a read operation in the memory unit which is 
originally designated to store write operations, 

wherein if there is a read operation in the memory unit which is originally 
designated to store write operations, the fetch management unit simultaneously accesses 
the memory unit and the predetermined storage unit in which data is stored by the storing 
unit, and if an destination address for the read operation is in the predetermined storage 
unit, not in the memory unit vet, data for the read operation is provided from the 
predetermined storage unit . 
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14. (Original) The apparatus of claim 13, wherein the storage management unit 
stores write operations stored before the buffer overflow attack is made in the memory 
unit which is originally designated to store write operations if a buffer overflow attack is 
detected. 

15. (Original) The apparatus of claim 13, wherein the storing unit stores the 
write operations in the predetermined storage unit if there are second sets of consecutive 
write operations in contiguous regions of the memory unit, which is originally designated 
to store write operations, and otherwise writes the write operations to the memory unit. 

16. (Canceled). 

1 7. (Previously Presented) The apparatus of claim 1 3, wherein the 
predetermined storage unit in which data are stored by the storing unit is a FIFO (first-in- 
first-out) device. 

18. (Original) The apparatus of claim 17, wherein the predetermined interval at 
which the storage management unit stores the contents stored in the FIFO device in the 
memory unit which is originally designated to store the write operations is determined 
according to the capacity of the FIFO device. 



